mirror of
https://github.com/lunchcat/sif.git
synced 2026-07-04 11:47:01 -07:00
68075b6901
cover three platforms the built-in cms scanner misses (it only handles wordpress, drupal and joomla). markers are structural: generator meta, framework-specific js init and asset paths, not bare brand strings, so a page that merely mentions the cms does not match. ghost also extracts its version from the generator meta.
28 lines
529 B
YAML
28 lines
529 B
YAML
# Magento CMS Detection Module
|
|
|
|
id: cms-magento
|
|
info:
|
|
name: Magento Detection
|
|
author: sif
|
|
severity: info
|
|
description: Detects Magento / Adobe Commerce e-commerce installations
|
|
tags: [cms, magento, ecommerce, detection, info]
|
|
|
|
type: http
|
|
|
|
http:
|
|
method: GET
|
|
paths:
|
|
- "{{BaseURL}}"
|
|
- "{{BaseURL}}/customer/account/login/"
|
|
|
|
matchers:
|
|
- type: word
|
|
part: all
|
|
words:
|
|
- "data-mage-init"
|
|
- "text/x-magento-init"
|
|
- "mage/cookies"
|
|
- "Mage.Cookies"
|
|
condition: or
|